6.5 Find Unmanaged, Public-Facing Cloud and Container Assets CCCS Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   Which CrowdStrike feature is designed to discover and inventory cloud and container assets?

   • AFalcon Cloud Security
   • BFalcon Discover
   • CFalcon Sandbox
   • DFalcon Overwatch
   Reveal Solution Discussion Select an answer first
2. 17expert · hard

   A security analyst is correlating metadata from multiple sources to determine if an asset is unmanaged and public-facing. They have the following data: the asset is not in the CMDB, it has a public IP, and its security group allows inbound traffic from the internet. However, the asset is also listed in CrowdStrike Falcon as a managed asset. What should the analyst conclude?

   • AThe asset is unmanaged because it is not in the CMDB, but it is public-facing; CrowdStrike's listing may be due to discovery, not management.
   • BThe asset is a false positive and should be ignored.
   • CThe asset is managed because CrowdStrike lists it.
   • DThe asset is not public-facing because CrowdStrike manages it.
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   Why is it important to enumerate assets across multiple cloud accounts and regions?

   • ABecause each region has different security compliance requirements
   • BBecause cloud providers charge different prices in different regions
   • CBecause assets in one account cannot be accessed from another account
   • DBecause unmanaged assets are often created in non-standard accounts or regions
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   What is the primary goal of prioritizing unmanaged public-facing assets?

   • ATo ensure all assets are moved to a single cloud provider
   • BTo guide remediation efforts toward the highest-risk assets first
   • CTo reduce the total number of cloud assets
   • DTo automatically delete unmanaged assets
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A security analyst has identified several unmanaged public-facing assets. Which asset should be prioritized for remediation first?

   • AAn unmanaged Azure VM with a public IP but no open ports
   • BAn unmanaged container image in a private registry with no known vulnerabilities
   • CAn unmanaged S3 bucket with public read access containing customer data
   • DAn unmanaged EC2 instance with a public IP running a non-critical test application
   Reveal Solution Discussion Select an answer first